Re: LDP over Postgres - Mailing list pgsql-admin

From Holger Jakobs
Subject Re: LDP over Postgres
Date
Msg-id 09104dd8-006b-73cc-adb1-50314185aa50@jakobs.com
Whole thread Raw
In response to LDP over Postgres  (jagjit singh <jagjitsingh.ocp@gmail.com>)
List pgsql-admin
Am 01.12.22 um 21:43 schrieb jagjit singh:
> Hi Experts,
>
> Does anyone have documentation to implement LDAP over Postgresql 14.
>
> I have a requirement in my project.
>
> Thanks in advance
>

Someone else wrote on this mailing list:

PostgreSQL supports GSSAPI / Kerberos, which is a much better approach 
in Active Directory and other environments where Kerberos is deployed.

Using LDAP exposes the user's password to the database server and 
therefore isn't secure and should be strongly discouraged.

You can certainly have applications authenticate to PostgreSQL using 
Kerberos too with very little overhead (unlike PG's LDAP authentication 
option, which makes a synchronous call out to the LDAP server on each 
and every login).

(from the PostgreSQL mailing list, 2022-01-21)

-- 
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012


Attachment

pgsql-admin by date:

Previous
From: jagjit singh
Date:
Subject: LDP over Postgres
Next
From: Jeff Janes
Date:
Subject: Re: Reporting from Standby